From 373f30a5d17a4791cc7d618439efff1f89fe748a Mon Sep 17 00:00:00 2001 From: Sawyer Cutler Date: Tue, 15 Sep 2026 14:16:58 -0700 Subject: [PATCH] fix(prompts): let grants govern outside-workspace plugin reads Permission grants already govern outside-workspace reads, including the yolo exemption, so a prompt-level ban diverges from enforcement and blocks legitimate reads. --- src/agent/prompts.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/agent/prompts.ts b/src/agent/prompts.ts index 80cfae44b..73a227a34 100644 --- a/src/agent/prompts.ts +++ b/src/agent/prompts.ts @@ -94,7 +94,7 @@ export function buildHarnessFacts( ...(dynamicTools ? [ "- Core tools plus the advertised catalog (including skill_search) are resident. Use tool_search to load extra capabilities from plugins or integrations when needed.", - "- Use search_agents before dispatching named specialists or teams (ids and descriptions by default; include_body=true for the loaded system prompt). Do not read_file plugin paths outside the workspace.", + "- Use search_agents before dispatching named specialists or teams (ids and descriptions by default; include_body=true for the loaded system prompt).", "- The user may send follow-up messages while workers run; they are queued. Enter delivers at the next parent tool.boundary; Alt+Enter on session-idle. A long parent tool holds that boundary. Update your plan, spawn or adjust workers, and keep the operator informed.", ] : ["- The tools below are your full toolset."]),